Detections
Analytics

Moodle 2.1.x < 2.1.8 Multiple Vulnerabilities

medium Nessus Network Monitor Plugin ID 9407

Synopsis

The remote web server is hosting a web application that is vulnerable to multiple attack vectors.

Description

The remote web server hosts Moodle, an open-source course management system. Versions of Moodle 2.1.x prior to 2.1.8 are exposed to the following vulnerabilities :

 - A flaw exists that is triggered when the 'webservice/lib.php' script fails to properly limit tokens to the service that issued them. This may allow a remote attacker to use a token intended for one service to gain access to arbitrary other external services. (CVE-2012-4402)
 - A flaw exists that may lead to an unauthorized information disclosure. The issue is triggered when the 'lib/filelib.php' script does not properly check the publication state of blog files. This may allow a remote attacker to gain access to the embedded files of the blog before it is published. (CVE-2012-4407)
 - A flaw exists when permissions are not properly verified on the reset page. This may allow a remote attacker to reset a course via the reset page. (CVE-2012-4408)

Solution

Upgrade to Moodle version 2.1.8 or later.

See Also

https://docs.moodle.org/dev/Moodle_2.1.8_release_notes

Plugin Details

Severity: Medium

ID: 9407

Family: CGI

Published: 7/21/2016

Updated: 3/6/2019

Risk Information

VPR

Risk Factor: Low

Score: 2.7

CVSS v2

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N

CVSS v3

Risk Factor: Medium

Base Score: 5.4

Temporal Score: 5.2

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Temporal Vector: CVSS:3.0/E:X/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:moodle:moodle

Patch Publication Date: 9/17/2012

Vulnerability Publication Date: 9/17/2012

Reference Information

CVE: CVE-2012-4402, CVE-2012-4407, CVE-2012-4408

BID: 55565